CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,321 vulnerabilities with CWE-352
CVE-2025-58430 MEDIUM
listmonk <= 1.1.0 - Cross-Site Scripting via Nonce Bypass
CVSS 6.1
CVE-2025-54256 HIGH
Dreamweaver < 21.6 - Cross-Site Request Forgery
CVSS 8.6
CVE-2025-58997 CRITICAL
Frenify Mow <= 4.10 - Cross-Site Request Forgery
CVSS 9.6
CVE-2025-58991 HIGH
Cristiano Zanca WooCommerce Booking Bundle Hours <0.7.4 - CSRF
CVSS 7.1
CVE-2025-58975 MEDIUM
Helmut Wandl Advanced Settings <3.1.1 - CSRF
CVSS 4.3
CVE-2025-8711 MEDIUM
Ivanti Connect Secure < 22.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-55147 HIGH
Ivanti Connect Secure <22.7R2.9,22.8R2 - CSRF
CVSS 8.8
CVE-2025-42923 MEDIUM
SAP Fiori App Manage Work Center Groups - CSRF
CVSS 4.3
CVE-2025-48104 HIGH
Floating Window Music Player <3.4.2 - CSRF/XSS
CVSS 7.1
CVE-2025-27003 MEDIUM
fullworks Quick Paypal Payments <5.7.46 - CSRF
CVSS 4.3
CVE-2025-58878 MEDIUM
Woocommerce Gifts Product <1.0.0 - CSRF
CVSS 6.5
CVE-2025-58869 MEDIUM
SimaCookie <= 1.3.2 - Cross-Site Request Forgery
CVSS 6.5
CVE-2025-58865 MEDIUM
reimund Compact Admin <1.3.0 - CSRF
CVSS 4.3
CVE-2025-58861 HIGH
WP Corner Quick Event Calendar <1.4.9 - CSRF
CVSS 7.1
CVE-2025-58860 HIGH
KaizenCoders Enable Latex <1.2.16 - CSRF/XSS
CVSS 7.1
CVE-2025-58859 HIGH
Add to Feedly <= 1.2.11 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-58856 MEDIUM
Woocommerce Notify Updated Product <1.6 - CSRF
CVSS 6.5
CVE-2025-58854 HIGH
Samer Bechara Ultimate AJAX Login <1.2.1 - CSRF
CVSS 7.1
CVE-2025-58853 HIGH
OTWthemes Popping Sidebars and Widgets Light <1.27 - CSRF/XSS
CVSS 7.1
CVE-2025-58852 HIGH
MSTW League Manager <= 2.10 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-58849 HIGH
Hide Real Download Path <1.6 - CSRF
CVSS 7.1
CVE-2025-58848 HIGH
WP likes <= 3.1.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-58847 HIGH
WN Flipbox Pro <= 2.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-58846 HIGH
WordPress Buffer - HYPESocial < 2020.1.0 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-58845 HIGH
ChrisHurst Bulk Watermark -n/a-1.6.10 - CSRF
CVSS 7.1
Details
Vulnerabilities 9,321
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits